$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa File: 2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa (raw, json) Hash identifier: 67XcCi1Mjrc5xMvLlFVf322i7dxLmWaBqA7btuT1XBI= Subject key identifier: 34:AB:13:18:6D:38:53:03:B1:39:97:1D:02:7B:40:3A:85:3B:0C:CB Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584A81461F53949D8A20C4DEAA40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 12041 IP address blocks: 161.232.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:1f:53:94:9d:8a:20:c4:de:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=e07965d3-097a-4c04-a033-690d95ff1cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:78:b1:1a:7b:5b:3c:5e:f2:7d:67:91:b6:ec: 11:fc:78:5a:3b:72:9a:26:39:c1:31:60:3b:01:82: 95:22:06:85:41:54:10:4d:d6:cb:71:0e:2f:21:08: 88:45:c8:fc:88:d9:40:0a:24:c4:c2:7d:ab:23:70: b5:6c:66:17:91:fa:73:d5:9d:93:81:f3:58:b5:73: fc:50:13:3a:cb:52:95:d9:d1:4b:62:f8:87:b2:74: c8:8d:03:04:d5:8e:d8:e1:d3:72:57:67:17:de:a3: 0e:6f:3e:70:ff:c6:43:a9:fb:b9:f3:a3:ed:8b:e6: cb:16:ad:56:f6:3a:9e:7a:23:18:97:d6:2c:2e:c3: 69:52:8b:79:0b:4a:4c:90:5d:52:f5:9d:7d:a1:95: 2d:39:26:f9:57:f4:f3:2c:01:12:a6:8a:e6:2c:ac: de:51:4f:e3:b7:bc:a8:5d:29:d3:5f:a4:a7:47:27: bc:a8:0f:c2:aa:e4:01:9b:84:33:83:29:51:04:89: 22:02:95:92:de:6d:ff:d3:e6:33:a6:86:25:4d:f3: 64:d4:ae:40:58:db:02:c4:4e:2f:7d:99:d7:02:f3: 73:d7:b0:65:f7:c9:1c:01:17:36:e4:5d:57:e4:a9: 39:b0:d7:bb:17:62:5f:e3:3b:f7:69:29:16:c2:d2: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AB:13:18:6D:38:53:03:B1:39:97:1D:02:7B:40:3A:85:3B:0C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2f00a4a5-41c1-3c88-97ad-8b8e6df6679a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:77:19:53:55:10:c7:a8:a7:0d:eb:fe:cf:86:22:5f:25:fe: 88:f9:e9:27:2f:d9:03:2b:9d:35:4c:3c:ed:b1:72:c7:12:c9: e0:09:90:2d:f6:74:43:49:85:4a:3b:1d:5c:32:09:47:94:db: b5:1a:f5:61:ca:6a:a8:fd:5d:a4:7d:19:da:a7:67:f1:a3:90: a0:c8:73:5e:4d:a5:ba:dd:c4:0f:34:c2:37:52:7e:85:ec:70: 4c:2e:62:16:2e:c4:92:ec:57:08:82:c4:8d:91:16:6e:bc:8e: 99:bd:e5:c3:45:14:65:be:b8:3b:87:59:f5:2d:95:a6:c9:d1: 7e:ed:02:db:1c:23:a6:09:39:3e:cb:97:4e:bb:0b:58:58:c0: c1:af:b3:7e:72:42:04:94:5f:f0:b1:ef:1a:dd:ef:97:a3:98: 30:a8:85:3d:f5:08:d4:d2:77:9c:6c:33:f9:c0:4a:d2:55:29: 05:a3:ce:fe:70:db:e0:16:62:e2:00:10:d9:ae:03:e2:1e:10: 7d:3f:3a:b9:bf:7b:9e:5e:71:44:9d:f0:fb:4c:2e:81:4b:23: ef:55:ef:1c:73:e8:72:1b:95:83:2e:82:ac:0c:2c:0a:ec:ee: fb:09:7d:49:fb:9d:08:bb:fc:a8:c2:ca:cc:63:70:ad:35:02: 8e:8b:64:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRh9TlJ2KIMTeqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTA3OTY1ZDMtMDk3YS00YzA0LWEwMzMtNjkwZDk1ZmYxY2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXixGntbPF7yfWeRtuwR/HhaO3KaJjnBMWA7 AYKVIgaFQVQQTdbLcQ4vIQiIRcj8iNlACiTEwn2rI3C1bGYXkfpz1Z2TgfNYtXP8 UBM6y1KV2dFLYviHsnTIjQME1Y7Y4dNyV2cX3qMObz5w/8ZDqfu586Pti+bLFq1W 9jqeeiMYl9YsLsNpUot5C0pMkF1S9Z19oZUtOSb5V/TzLAESpormLKzeUU/jt7yo XSnTX6SnRye8qA/CquQBm4QzgylRBIkiApWS3m3/0+YzpoYlTfNk1K5AWNsCxE4v fZnXAvNz17Bl98kcARc25F1X5Kk5sNe7F2Jf4zv3aSkWwtKFYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSrExhtOFMDsTmXHQJ7QDqFOwzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMmYwMGE0YTUtNDFjMS0z Yzg4LTk3YWQtOGI4ZTZkZjY2NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoej8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH53GVNVEMeopw3r/s+GIl8l/oj56Scv2QMrnTVMPO2xcscSyeAJkC32 dENJhUo7HVwyCUeU27Ua9WHKaqj9XaR9GdqnZ/GjkKDIc15NpbrdxA80wjdSfoXs cEwuYhYuxJLsVwiCxI2RFm68jpm95cNFFGW+uDuHWfUtlabJ0X7tAtscI6YJOT7L l067C1hYwMGvs35yQgSUX/Cx7xrd75ejmDCohT31CNTSd5xsM/nAStJVKQWjzv5w 2+AWYuIAENmuA+IeEH0/Orm/e55ecUSd8PtMLoFLI+9V7xxz6HIblYMugqwMLArs 7vsJfUn7nQi7/KjCysxjcK01Ao6LZGc= -----END CERTIFICATE-----Generated at Thu Aug 7 01:07:15 2025 by rpki-client